struct _VF_TARGET_VERIFIED_DRIVER_DATA { struct _VF_SUSPECT_DRIVER_ENTRY* SuspectDriverEntry;/* 0x0 4 */ void* WMICallback;/* 0x4 4 */ struct _LIST_ENTRY EtwHandlesListHead;/* 0x8 8 */ union { struct { unsigned long MissedEtwRegistration : 1;/* 0x10:0 4 */ unsigned long IsBootDriver : 1;/* 0x10:1 4 */ unsigned long Spare : 30;/* 0x10:2 4 */ } Flags;/* 0x10 4 */ unsigned long Whole;/* 0x10 4 */ } u1;/* 0x10 4 */ unsigned long Signature;/* 0x14 4 */ unsigned char SeSigningLevel;/* 0x18 1 */ /* 7 bytes padding */ union _SLIST_HEADER PoolPageHeaders;/* 0x20 8 */ union _SLIST_HEADER PoolTrackers;/* 0x28 8 */ void** DifPluginData;/* 0x30 4 */ volatile unsigned long CurrentPagedPoolAllocations;/* 0x34 4 */ volatile unsigned long CurrentNonPagedPoolAllocations;/* 0x38 4 */ unsigned long PeakPagedPoolAllocations;/* 0x3c 4 */ /* ── cacheline 1 boundary (64 bytes) ── */ unsigned long PeakNonPagedPoolAllocations;/* 0x40 4 */ volatile unsigned long PagedBytes;/* 0x44 4 */ volatile unsigned long NonPagedBytes;/* 0x48 4 */ unsigned long PeakPagedBytes;/* 0x4c 4 */ unsigned long PeakNonPagedBytes;/* 0x50 4 */ unsigned long RaiseIrqls;/* 0x54 4 */ unsigned long AcquireSpinLocks;/* 0x58 4 */ unsigned long SynchronizeExecutions;/* 0x5c 4 */ unsigned long AllocationsWithNoTag;/* 0x60 4 */ unsigned long AllocationsFailed;/* 0x64 4 */ unsigned long AllocationsFailedDeliberately;/* 0x68 4 */ unsigned long LockedBytes;/* 0x6c 4 */ unsigned long PeakLockedBytes;/* 0x70 4 */ unsigned long MappedLockedBytes;/* 0x74 4 */ unsigned long PeakMappedLockedBytes;/* 0x78 4 */ unsigned long MappedIoSpaceBytes;/* 0x7c 4 */ /* ── cacheline 2 boundary (128 bytes) ── */ unsigned long PeakMappedIoSpaceBytes;/* 0x80 4 */ unsigned long PagesForMdlBytes;/* 0x84 4 */ unsigned long PeakPagesForMdlBytes;/* 0x88 4 */ unsigned long ContiguousMemoryBytes;/* 0x8c 4 */ unsigned long PeakContiguousMemoryBytes;/* 0x90 4 */ struct _LIST_ENTRY ContiguousMemoryListHead;/* 0x94 8 */ volatile unsigned long ExecutePoolTypes;/* 0x9c 4 */ volatile unsigned long ExecutePageProtections;/* 0xa0 4 */ volatile unsigned long ExecutePageMappings;/* 0xa4 4 */ volatile unsigned long ExecuteWriteSections;/* 0xa8 4 */ volatile unsigned long SectionAlignmentFailures;/* 0xac 4 */ volatile unsigned long IATInExecutableSection;/* 0xb0 4 */};size 184 (0xb8)40 members1 hole (7 bytes)padding 43 cachelines
Used in (1)